Koddro is an Internet worm that spreads by e-mail through messages with infected attachments. Once the user opens such an attachment, the parasite secretly installs itself to the system and runs a spreading routine. It uses own mail engine to send bogus letters to e-mail addresses it finds in local text, web and program files. Koddro carries a payload. It monitors user Internet activity and attempts to steal banking information when the user visits certain web sites. Gathered data is transferred to predetermined sites.